Even in the tech industry, ICS security is often overlooked. This training showed me how ICS threats impact all sectors and gave me the skills to mitigate them.
Industrial Control Systems Security Training
Industrial Control Systems (ICS) and Operational Technology (OT) are increasingly targeted by cyber threats, putting businesses, governments, and national infrastructure at risk. Specialized ICS/OT security training is vital to securing operations across all industries and defending the systems that make, move, and power the world.
The SANS ICS Security Mission
Unlike traditional IT environments, ICS/OT systems face unique risks that demand both cybersecurity expertise and operational awareness. SANS ICS security training prepares defenders for the evolving threats targeting essential industries worldwide. From foundational to advanced—SANS ICS training, led by expert instructors with real-world labs using cyber physical systems, provides the knowledge and hands-on skills to defend the critical infrastructure and industrial operations that drive economies.
What You'll Learn
ICS/OT Cyber Threats & Defense Strategies
Understand the unique attack surfaces of ICS/OT environments and apply defense-in-depth strategies to mitigate real-world threats.
Secure ICS/OT Architecture & Risk Management
Learn how to design, assess, and strengthen industrial systems while aligning with industry frameworks and regulatory requirements.
Threat Detection & Incident Response in ICS/OT
Develop the skills to detect, investigate, and respond to cyber threats targeting industrial operations, minimizing downtime and business disruption.
Student Insights
Featured Courses
- Slide 1 of 7
ICS515: ICS Visibility, Detection, and Response
ICS515Industrial Control Systems Security- GIAC Response and Industrial Defense (GRID)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 22 Hands-On Labs
- Slide 2 of 7
ICS418: ICS Security Essentials for Leaders
ICS418Industrial Control Systems Security- 12 CPEs / 12 Hours (Self-Paced)
- Labs: 12 Hands-On Labs
- Slide 3 of 7
ICS613: ICS/OT Penetration Testing & Assessments
ICS613Industrial Control Systems Security- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours
- Labs: 27 Hands-On Labs
- Slide 4 of 7
ICS456: Essentials for NERC Critical Infrastructure Protection
ICS456Industrial Control Systems Security- GIAC Critical Infrastructure Protection (GCIP)
- 5 Days (Instructor-Led)
- 31 CPEs / 31 Hours (Self-Paced)
- Labs: 23 Hands-On Labs
- Slide 5 of 7
ICS310: ICS Cybersecurity Foundations
ICS310Industrial Control Systems Security- 12 CPEs / 12 Hours (Self-Paced)
- Labs: 3 Hands-On Labs
- Slide 6 of 7
ICS410: ICS/SCADA Security Essentials
ICS410Industrial Control Systems Security- GIAC Global Industrial Cyber Security Professional (GICSP)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 15 Hands-On Labs
- Slide 7 of 7
ICS612: ICS Cybersecurity In-Depth
ICS612Industrial Control Systems Security- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours
- Labs: 31 Hands-On Labs
Meet Your Experts
Mark Bristow
DirectorMark loves the ever-changing landscape of security and views it as a puzzle that must be solved. He especially loves the challenges in ICS security, where the cyber meets the physical. There is no greater success than a safe and effective process.
Learn moreLesley Carhart
Technical Director of Industrial Incident ResponseLesley is Technical Director of Industrial Incident Response for North America for Dragos and teaches SANS Industrial Control System courses. She's a recognized leader in cybersecurity and has won a number of prestigious awards in the field.
Learn moreJason Christopher
Senior Vice President of Cybersecurity and Digital Transformation for Research and InnovationJason D. Christopher, Energy Impact Partners SVP, teaches ICS456 and co-authors ICS418, turning regulation into safe, reliable OT-supporting programs and metrics to align practitioners and leaders on clear, defensible action.
Learn moreTim Conway
SANS ICS Curriculum LeadSANS Fellow Tim Conway, co-author of ICS456, ICS310, and ICS612, blends decades of hands-on ICS/OT security and compliance expertise with ongoing frontline consulting, helping students turn complex industrial challenges into practical skills.
Learn moreJason Dely
DirectorJason Dely brings over 20 years of experience and a diverse industrial control system background to SANS and the industrial control system (ICS) community.
Learn moreMonta Elkins
Hacker-in-ChiefMonta Elkins is currently "Hacker-in-Chief" for FoxGuard Solutions, an ICS patch provider. A security researcher and consultant; he was formerly Security Architect for Rackspace, and the first ISO for Radford University.
Learn moreExplore Careers Within Industrial Control Systems Security
SANS ICS Security Summit & Training 2026
The SANS ICS Security Summit offers something for everyone—from introductory learning for those new to ICS/OT security to advanced insights and techniques for seasoned practitioners and leaders. Join us at Disney in Orlando to experience immersive workshops, in-depth talks, and practical takeaways led by the industry’s top experts.
Upcoming Events
- Slide 1 of 3
Strengthening the Foundation: Implementing SANS ICS Controls 1 and 2
In this session, we dive into the first two pillars of the SANS Top 5 Critical ICS Controls: ICS Incident Response and Defensible Architecture.
WebinarIndustrial Control Systems Security👁 Man presenting webcast- 3 Jun 2026
- 17:00 CDT
- Justin Searle
- Slide 2 of 3
ICS Solutions Track 2026: OT/ICS Actionable Industrial Cyber Defense - Live Demos, Real Attack Case Studies, and Proven Countermeasures
Top ICS/OT vendors will showcase cutting-edge tools for anomaly detection, ransomware containment, and engineering-aware industrial ICS/OT incident response—proving how defenders can protect the systems that make, move, and power our world.
WebinarIndustrial Control Systems Security👁 Webcast Abstract Image- 9 Jun 2026
- 10:00 EDT
- Dean Parsons
- Slide 3 of 3
SANS 2026 State of ICS/OT Security Survey Insights: Industrial Cybersecurity at a Crossroads
Join us to discuss insights from SANS 9th annual State of ICS/OT Security Survey. This trusted industry research captures how organizations across sectors are evolving their industrial cybersecurity strategies in response to regulatory pressures, emerging threats, and operational demands.
WebinarIndustrial Control Systems Security👁 Man presenting webcast to laptop screen- 10 Nov 2026
- 10:30 EST
- Jason Christopher
ICS/OT Insights From The Experts
SANS ICS Command Briefing 2026: Preparing for What Comes Next in Industrial Cybersecurity
Grounded in current SANS research and frontline operational experience, this one-hour session brings together Tim Conway, Robert M. Lee, Jason D. Christopher, and Dean Parsons to deliver leadership-level guidance for practitioners and executives.
Webinar
FeaturesTim Conway, Robert M. Lee, Jason Christopher & Dean Parsons
- Slide 1 of 3
- Slide 2 of 3
- Slide 3 of 3👁 ICS Workers
Drive Regulations into Response: Compliance That Reduces Consequence
BlogWritten ByJason Christopher
